540 matches found
BS.Player 2.34 Build 980 - .bsl Local Buffer Overflow (SEH)
BS.Player 2.34 Build 980 - .bsl Local Buffer Overflow SEH ?php / Bs.Player = 2.34 Build 980 .bsl local buffer overflow 0day exploit seh by Nine:Situations:Group::pyrokinesis Overlong hostnames in bsplayer playlist files causes eax and seh handlers to be overwritten. Cannot reliably debug with oll...
Racer 0.5.3 Beta 5 - Remote Stack Buffer Overflow
/ Racer vs 0.5.3 beta 5 Remote Stack Buffer OverflowC exploit by fl0 fl0w -------------------------------------------------------------------------------------------------- Description : Bug found some time ago by n00b Cheers mate ! :D ,I wanted to make a more improved sploit , with lots of targe...
BS.Player <= 2.34 Build 980 (.bsl) Local Buffer Overflow Exploit (SEH)
Exploit for unknown platform in category local exploits ====================================================================== BS.Player = 2.34 Build 980 .bsl Local Buffer Overflow Exploit SEH ====================================================================== ?php / Bs.Player = 2.34 Build 980...
BS.Player 2.34 Build 980 - '.bsl' Local Buffer Overflow (SEH)
?php / Bs.Player = 2.34 Build 980 .bsl local buffer overflow 0day exploit seh by Nine:Situations:Group::pyrokinesis Overlong hostnames in bsplayer playlist files causes eax and seh handlers to be overwritten. Cannot reliably debug with olly because of code compression, just used...
Chasys Media Player 1.1 (.pls) Stack Overflow Exploit #2
No description provided by source. !/usr/bin/python Chasys Media Player 1.1 .pls Stack Overflow Exploit By: Encrypt3d.M!nd Credit flys to: zAx the good thing in this one that the program won't crash when the playlist file imported,and will keep running. header =...
Chasys Media Player 1.1 (.m3u) Stack Overflow Exploit
No description provided by source. !/usr/bin/python Chasys Media Player 1.1 .m3u Stack Overflow Exploit By: Encrypt3d.M!nd Credit flys to: zAx the good thing in this one that the program won't crash when the playlist file imported,and will keep running. header = "EXTM3U\n" junk = "\x41"260 eip =...
CDex 1.70b2 (.ogg) Local Buffer Overflow Exploit (xp/ sp3)
Exploit for unknown platform in category local exploits ========================================================== CDex 1.70b2 .ogg Local Buffer Overflow Exploit xp/ sp3 ========================================================== Tools - Media file Player - Select files - Browse to a folder - - Op...
Easy File Sharing Web Server 4.8 File Disclosure
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Easy File Sharing Web Server File Disclouse Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Program: Easy File Sharing Web Server Version: 4.8 Download: http://www.sharing-file.com/efssetup.exe Found by Mountassif Moad www.v4-team.com -- Bug -- Exploit ...
Easy File Sharing Web Server 4.8 File Disclosure Vulnerability
No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Easy File Sharing Web Server File Disclouse Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Program: Easy File Sharing Web Server Version: 4.8 Download: http://www.sharing-file.com/efssetup.exe Found by Mountassif Moad...
Easy File Sharing Web Server 4.8 - File Disclosure
Easy File Sharing Web Server 4.8 - File Disclosure -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Easy File Sharing Web Server File Disclouse Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Program: Easy File Sharing Web Server Version: 4.8 Download: http://www.sharing-file.com/efssetup.exe Found by...
Easy File Sharing Web Server 4.8 - File Disclosure
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Easy File Sharing Web Server File Disclouse Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Program: Easy File Sharing Web Server Version: 4.8 Download: http://www.sharing-file.com/efssetup.exe Found by Mountassif Moad www.v4-team.com -- Bug -- Exploit ...
win32 telnetbind by winexec 111 bytes
Exploit for win32 platform in category shellcode ===================================== win32 telnetbind by winexec 111 bytes ===================================== ; payload:add admin acount & Telnet Listening ; Author: DATASNIPER ; size:111 bytes ; platform:WIN32/XP SP2 FR ; thanks:Arab4services...
win32/xp sp2 Shellcode cmd.exe 57 bytes
No description provided by source. / win32/xp sp2 cmd.exe 57 bytes Author : Mountassif Moad Big Thnx : Houssamix :d Assembly Code : Secret Changed by : Stack Description : It is 57 Byte Shellcode which Execute Cmd.exe Tested Under Windows Xp SP2 / include stdlib.h include string.h unsigned char...
Google Chrome 1.0.154.46 (ChromeHTML://) Parameter Injection PoC
No description provided by source. Try this: chromehtml:"%20--renderer-path="calc"%20--no-sandbox Disabling sandbox does matter : Tested with Google Chrome Chrome 1.0.154.46 on Win XP/Vista and IE6/IE7 and it works ... Full PoC: htmlheadtitleChrome URI Handler Remote Command Execution...
Google Chrome 1.0.154.46 - '(ChromeHTML://)' Injection
Try this: chromehtml:"%20--renderer-path="calc"%20--no-sandbox Disabling sandbox does matter : Tested with Google Chrome Chrome 1.0.154.46 on Win XP/Vista and IE6/IE7 and it works ... Full PoC: Chrome URI Handler Remote Command Execution PoC This is a test milw0rm.com 2009-01-30...
Total Video Player (vcen.dll) Remote off by one Crash Exploit
Hi, Total Video Player vcen.dll Remote off by one Crash Exploit NickName : Cn4phux Email : Cn4phuxatgmail.com Total Video Player vcen.dll Remote Heap Overflow Crash By Cn4phux. Vendor: http://www.effectmatrix.com/ Risk : high The "? TVP type= ?" tag fail to handle long strings, which can lead to ...
tvp-crash.txt
Total Video Player vcen.dll Remote Heap Overflow Crash By Cn4phux. Vendor: http://www.effectmatrix.com/ Risk : high The "" tag fail to handle long strings, which can lead to a Heap overflow in TVP. This bug can be remote or local, TVP parse any supplied file for a reconized header even if the...
Total Video Player (vcen.dll) Remote off by one Crash Exploit
No description provided by source. Total Video Player vcen.dll Remote Heap Overflow Crash By Cn4phux. Vendor: http://www.effectmatrix.com/ Risk : high The "? TVP type= ?" tag fail to handle long strings, which can lead to a Heap overflow in TVP. This bug can be remote or local, TVP parse any...
Total Video Player (vcen.dll) Remote off by one Crash Exploit
Exploit for unknown platform in category dos / poc ============================================================= Total Video Player vcen.dll Remote off by one Crash Exploit ============================================================= Total Video Player vcen.dll Remote Heap Overflow Crash By...
Total Video Player - vcen.dll Remote Off-by-One Crash
Total Video Player - vcen.dll Remote Off-by-One Crash Total Video Player vcen.dll Remote Heap Overflow Crash By Cn4phux. Vendor: http://www.effectmatrix.com/ Risk : high The "" tag fail to handle long strings, which can lead to a Heap overflow in TVP. This bug can be remote or local, TVP parse an...